Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          x6QaCRj8otzPLVnYfvZs7eYO3M1kCml0l3iBaxrx1CY=
Subject key identifier:   C2:FD:CC:FD:B9:D3:94:B0:D4:29:F6:6B:38:4B:08:A4:B0:E8:7F:FB
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       5B2F13D63B419D987D0F59EB53F0EBEBF0F58169
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          0250
Signing time:             Sun 29 Jun 2025 09:30:23 +0000
Manifest this update:     Sun 29 Jun 2025 09:25:23 +0000
Manifest next update:     Mon 30 Jun 2025 12:31:23 +0000
Files and hashes:         1: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: xZZjbro5zLk1oyGqVK7m76LBNIEgAirpjrwgFYj51So=)
                          2: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: ipYqZy2Bw5WltHHZykTTJnZ3JhG9BblnpE6LKfOMyUY=)
                          3: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=)
                          4: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: OhJ1q+A9YdrW/BldsOP91XRg0qgnjy2ITkvARKzrKBs=)
                          5: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: 9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=)
                          6: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: 2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=)
                          7: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: 79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=)
                          8: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: LoNT6rAzouHElCAxQfq7lbXt6avk0AfPnw2zLK+lX6c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 12:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2f:13:d6:3b:41:9d:98:7d:0f:59:eb:53:f0:eb:eb:f0:f5:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Jun 29 09:25:23 2025 GMT
            Not After : Jun 30 12:31:23 2025 GMT
        Subject: CN=C2FDCCFDB9D394B0D429F66B384B08A4B0E87FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:bf:02:48:54:74:0c:07:6e:f1:dc:27:ac:
                    35:3f:f9:80:46:43:1e:1d:cd:04:cb:d9:65:d6:a9:
                    30:dc:a8:30:9d:8d:64:88:e5:02:44:f7:e7:54:04:
                    6b:d9:ee:7c:bb:ac:0e:ea:ae:92:ca:da:8c:06:e0:
                    c5:75:0f:e0:67:cd:d5:50:35:8a:15:a8:d2:42:9e:
                    e1:c2:26:a5:78:9c:c7:8a:3d:f5:21:e6:d0:b0:b6:
                    2b:39:92:f5:46:77:d1:46:50:78:00:34:7f:e4:02:
                    e4:5c:41:25:bf:52:5a:e5:c3:06:41:68:20:c0:ec:
                    06:20:33:39:a7:03:1c:fb:61:6f:97:17:a5:9a:9f:
                    c0:10:57:60:03:19:00:0f:fe:79:02:c3:79:72:a1:
                    73:4e:bd:90:09:e4:fb:59:34:42:16:61:dd:ba:55:
                    09:c6:2b:9f:4f:ac:d7:76:c7:d2:01:74:f9:f6:c4:
                    90:55:f2:76:a9:86:9a:40:97:fb:39:82:04:f8:21:
                    31:4f:e9:fc:dd:3c:78:10:31:45:2b:fe:a4:b3:ba:
                    eb:f6:fa:bd:83:8e:c7:b9:42:37:42:2b:99:5f:54:
                    c3:30:ae:77:19:aa:7e:af:0f:3a:c6:76:43:3d:04:
                    2d:f9:57:2a:a3:3c:0b:23:f3:89:90:64:2e:e0:47:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:CC:FD:B9:D3:94:B0:D4:29:F6:6B:38:4B:08:A4:B0:E8:7F:FB
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:9d:6e:3b:be:14:da:0f:c7:63:fc:52:14:d4:85:6c:85:5c:
         75:dd:21:c4:c3:4e:0a:68:3d:21:30:1f:b6:59:0c:0a:7b:23:
         73:ab:de:44:ec:d5:47:95:a6:4c:aa:b5:16:f9:8f:ba:20:c6:
         55:f4:cf:3e:e4:79:16:46:72:37:84:4f:fc:9f:99:ca:46:17:
         71:7e:9c:6e:ee:09:17:d1:e3:8b:71:ff:a9:71:1c:34:bc:48:
         a9:ae:96:2a:26:c1:fa:b4:65:4b:3a:b1:61:55:32:4b:d1:1d:
         16:ef:39:91:82:79:8a:11:2b:af:17:44:75:c0:3f:f5:7e:ea:
         6a:e8:ea:9a:54:b0:94:43:54:18:17:51:57:a4:57:b8:9a:ef:
         10:00:91:97:6a:19:08:72:d8:b1:a5:46:c5:3d:6d:f8:6b:6e:
         6b:19:43:f7:b9:cc:50:56:38:19:4d:03:62:53:4b:d5:a2:b2:
         ae:3a:ca:4e:4e:a8:e1:c5:c7:f9:32:8d:3d:f3:76:d2:22:0d:
         0c:36:e9:a7:38:bc:2f:69:1d:a2:be:7c:90:37:c0:4f:d9:4e:
         c5:87:2b:7d:d1:17:ce:2f:78:be:92:a1:f6:92:08:b8:56:ab:
         f1:1d:0d:8d:55:85:72:4a:ad:ca:89:fb:c6:da:1e:bd:4a:30:
         ec:41:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:11:10 2025 by rpki-client